Well, you should always have server-side validation
regardless of whether or not you have client-side, simply because
not everyone has javascript turned on. Rock-solid applications
never rely solely on Client-Side validations.
The CFGRID is a java or flash control, depending on choice,
so you should be looking at server -side anyways, since in the
client browser it may not work with one over another, whether they
have JS turned off or not.
You would have to have JS delve into and read the JAVA
properties, or flash properties in each case, which is not overly
simple. Server side is generally recommended for CFGRID only,
especially since it does not necessarily record the input in the
same order that you visually see it on screen.